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Exhibit C 
tzlbacl4 . sql 



$Header: tzlbacl4 . sql ... 



REMARK >>>> Set System Variables For Current SQLPlus Session <<<< 

SET FEEDBACK 1 

SET NUMWIDTH 10 

SET PAGES I ZE 24 

SET LINESIZE 8 0 

SET TRIMS POOL ON 

SET TAB OFF 

SET DEFINE ' ^ ' 

SET ECHO ON 

CONNECT SCOTT/TIGER 

CREATE TABLE abc 
(COLl VARCHAR2 (45) ) ; 

CREATE TABLE j ing 
(COLl VARCHAR2 (45) ) ; 

GRANT ALL ON abc TO LBACSYS ; 

-- This should not be allowed as the user is SCOTT 

EXECUTE LBAC_SYSDBA. CREATE_POLICY { ' simple ' , ' lbac$testl ' , ' raghu • ) ; 

CONNECT LBACSYS /LBACSYS 

-- Create policies in database 

EXECUTE LBAC_SYSDBA . CREATE_POLICY ( ' simple ' , ' lbac$testl ' , ' raghu ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' complex' , ' lbac$testl ' , ' rghu' ) ; 
EXECUTE LBAC_SYSDBA . CREATE_POLICY { ' sile • , ' lbac$testl ' ) ; 

-- Error Conditions 

EXECUTE LBAC_SYSDBA . CREATE_POLICY (' complex' , • lbac$testl ' , ' aghu' ) ; 
EXECUTE LBAC_SYSDBA . CREATE_POLICY ( ' dummy ' , ' lbac$testl ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' new • , ' lbac$testl ' , • raghu ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' newl23 ' , ' lbac$ttl ' , ' xyz ' ) ; 

-- This should not fail . . . 
EXECUTE 

LBAC_SYSDBA. CREATE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz 12 3 4 ' , ' lbac$testl ' , ' f df ' ) ; 
EXECUTE 

LBAC_SYSDBA. CREATE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz ' , ' lbac$testl ' , ' f df ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( • India ' , ' lbac$testl ' , ' fdf ef g ' ) ; 

-- Add 5 policies due to max_label_policies default increase from 5 to 10. 
EXECUTE LBAC_SYSDBA . CREATE_POLICY ( ' abl ' , ' lbac$testl ' , ' vcl ' ) ; 
EXECUTE LBAC_SYSDBA . CREATE_POLICY ( ' ab2 ' , ' lbac$testl ' , 'vc2 ' ) ; 
EXECUTE LBAC_SYSDBA.CREATE_POLICY( 'ab3 ' , ' lbac$testl' , 'vc3 ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' ab4 ' , ' lbac$testl ' , ' vc4 ' ) ; 
EXECUTE LBAC_SYSDBA.CREATE_POLICY( 'abS ' , 'lbac$testl' , 'vcS' ) ; 



-- Error Conditions 

EXECUTE LBAC_SYSDBA.CREATE_POLICY( ' abc ' , ' lbac$testl' , 'vex' ) ; 

EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' simple ' ) ; 

EXECUTE 

LBAC_SYSDBA. GREATE_POLICY ( ' abcdef ghi jklmnopgrstuvwxyzl2345 ' , • lbac$testl ' , ' ragu ' 
) ; 

-- Drop extra 5 policies from above. 

EXECUTE LBAC_SYSDBA . DROP_POLICY ( ' abl ' ) ; 
EXECUTE LBAC_SYSDBA.DROP_POLiICY { ' ab2 ' ) ; 
EXECUTE LBAC_SYSDBA.DROP_POLICY { ' ab3 ' ) ; 
EXECUTE LBAC_SYSDBA.DROP_POLICY { ' ab4 ' ) ; 
EXECUTE LBAC_SYSDBA.DROP_POLICY ( ' ab5 ' ) ; 

-- Let us check the policies created . . . 
SELECT * 

FROM DBA_LBAC_POLICIES 
ORDER BY POLICY_NAME; 

EXECUTE LBAC_SYSDBA. ENABLE_POLICY { ' simple ' ) ; 

-- The basic objective from now on is to test the enable/disable procedures . . . 

EXECUTE LBAC_LABEL_Ar)MIN . CREATE_LABEL ( ' simple ' , 1 , ' A, B ■ , TRUE) ; 
EXECUTE LBAC_LABEL_ADMIN . CREATE_LABEL ( ' abcdef ghi j klmnopqrstuvwxyz ' , 2 , ' A ' , 
TRUE) ; 

EXECUTE 

LBAC_USER_ADMIN . SET_USER_LABELS ( ' abcdef ghi j klmnopqrstuvwxyz ' , ' SCOTT ' , TO_LABEL_L 
IST.FROM_CHAR( ' abcdef ghi j klmnopqrstuvwxyz ' ,NULL, 'A' ) ) ; 

SELECT * 

FROM DBA_LBAC_USER_LABELS ORDER BY USER_NAME, POLICY_NAME; 

-- Error Conditions 
EXECUTE 

LBAC_POLICY_ADMIN. APPLY_TABLE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz ' , ' SCOTT • , ' abc ' 
) ; 

-- OK now 
EXECUTE 

LBAC_POLICY_ADMIN . APPLY_TABLE_POLICY ( ' complex ' , ' SCOTT ' , ' abc ' , ' NO_CONTROL ' ) ; 
EXECUTE 

LBAC_POLICY_ADMIN.APPLY_TABLE_POLICY( 'complex' , 'SCOTT' , ' jing' , 'N0_CONTR0L' ) ; 

EXECUTE 

LBAC_POLICY_ADMIN.APPLY_TABLE_POLICY (' simple ' , 'SCOTT' , 'abc', ' DELETE_C0NTR0L ' ) ; 
EXECUTE 

LBAC_POLICY_ADMIN . APPLY_TABLE_POLICY ( ' simple ' , ' SCOTT ' , ' EMP • , ' DELETE_CONTROL ' ) ; 
EXECUTE 

LBAC_POLICY_ADMIN . APPLY_TABLE_POLICY ( ' sile ' , ' SCOTT ' , ' j ing ' , ' DELETE_CONTROL ' ) ; 
CONNECT . SCOTT/TIGER 
DESC abc; 



INSERT INTO abc (coll) 



VALUES ( ' fdfd' ) ; 



UPDATE abc 

SET raghu = LBACSYS . TO_LBAC_LABEL ( ' simple ' , ' A, B ' ) ; 

-- Should not allow . . . 
DELETE FROM abc ; 

SELECT coll , LABEL_TO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

-- Error Condition 

EXECUTE LBAC_SYSDBA. DISABLE_POLICY ( ' simple ' ) ; 

CONNECT LBACSYS /LBACSYS 

EXECUTE LBAC_SYSDBA. DISABLE_POLICY ( ' simple ' ) ; 

-- Error Conditions . . . 

EXECUTE LBAC_SYSDBA.DISABLE_POLICY( ' abcdef ghi j klmnopqrstuvwxyzf d ' ) ; 
EXECUTE LBAC_SYSDBA.DISABLE_POLICY ( ' abcdef ghi j klmnopgrstuvwxyz ' , ' f df ' ) ; 

-- Should not delete as the disable will be effective from next session only 
DELETE FROM SCOTT. abc, • 

COOTECT SCOTT/ TIGER 

SELECT coll , LABEL_TO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

-- Should delete now as the policy is disabled . . . 
DELETE FROM abc; 

SELECT col 1 , LABEL_TO_CHAR ( raghu) 
FROM abc 
ORDER BY coll; 

INSERT INTO. abc (coll) 
VALUES ('123233') ; 

-- Error Condition . . . 

EXECUTE LBAC_SYSDBA . ENABLE_POLICY ( ' simple ' ) ; 

CONNECT LBACSYS /LBACSYS 

EXECUTE LBAC_SYSDBA. ENABLE_POLICY ( ' simple ' ) ; 

-- Error Conditions . . . 

EXECUTE LBAC_SYSDBA. ENABLE_POLICY ( ' simplerl ' ) ; 
EXECUTE LBAC_SYSDBA . ENABLE_POLICY ( ' simple ' , FALSE) ; 

-- Should delete now as the enable will be effective only from new session 
DELETE FROM SCOTT. abc; 



CONNECT SCOTT/TIGER 



-- Expecting no rows . . . 

SELECT coll , LABEL_TO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

INSERT INTO abc (coll) 
VALUES ( ' 12 32 ' ) ; 

-- Delete should fail ... 
DELETE FROM abc; 

SELECT coll , LABEL_TO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

CONNECT LBACSYS/LBACSYS 

EXECUTE LBAC_SYSDBA.DROP_POLICY ( ' simple ■ , TRUE) ; 
EXECUTE LBAC_SYSDBA . DROP_POLICY ( ' complex ' , FALSE ) ; 
EXECUTE LBAC_SYSDBA.DROP_POLICY ( ■ sile ' ) ; 

EXECUTE LBAC_SYSDBA.DROP_POLICY( ' abcdef ghi j klmnopqrstuvwxyzl234 ' ) ; 
EXECUTE LBAC_SYSDBA.DROP_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz • ) ; 
EXECUTE LBAC_SYSDBA. DROP_POLICY ( ' india ' ) ; 

Error Conditions 
EXECUTE LBAC_SYSDBA. DROP_POLICY ( ' adf d ' ) ; 
EXECUTE LBAC_SYSDBA.DROP_P0LICY( ' simple ' ,XYZ) ; 

SELECT * 

FROM DBA_LBAC_POLICIES 
ORDER BY POLICY_NAME; 

CONNECT SCOTT/TIGER 

-- Simple policy was applied on two tables (abc,emp) the hidden column should 
--be dropped as the TRUE option is set; Policy complex was applied to 
-- two tables (abc, jing) and hidden column should not be dropped as the option 
-- was set to FALSE; Policy sile was applied to a table (jing) and the hidden 
-- column should not be dropped as the default option is FALSE. 

DESC abc; 
DESC jing; 
DESC EMP; 

DROP TABLE abc; 
DROP TABLE jing; 

SET ECHO OFF 



EXIT; 



